Question
An airline corporation wants to implement a chatbot application using a large language model (LLM) so its customers:
- Can ask questions and receive answers about flight details.
- Have the option to upload files.
Which of the following security controls should the airline use to protect against malicious input and unauthorized use beyond the service-level agreement? (Choose two.)
- A. Prompt guardrails Correct
- B. Role-based access controls
- C. Firewall rules
- D. Model token quotas Correct
Explanation
Prompt guardrails inspect and filter user prompts and uploaded content, blocking prompt injection and other malicious input before it reaches the model. Model token quotas cap how much each customer or session can consume, preventing usage beyond the service-level agreement and model denial-of-service. Role-based access controls govern who can access functions but do not filter malicious content, and firewall rules work at the network level and cannot see prompt content or usage volume.
